3982 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Mail interface in Zimbra Collaboration Server ZCS before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest...
CVE-2015-6541
Multiple cross-site request forgery CSRF vulnerabilities in the Mail interface in Zimbra Collaboration Server ZCS before 8.5 allow remote attackers to hijack the authentication of arbitrary users for requests that change account preferences via a SOAP request to service/soap/BatchRequest...
Apache Axis Detection (HTTP)
HTTP based detection of the Apache Axis SOAP stack. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH SPDX-FileCopyrightText: Reworked detection methods / pattern / code since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
Soap Buble Pop - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Soap Buble Pop published at the 'play' market has multiple vulnerabilities...
UBUNTU-CVE-2016-3185
The makehttpsoaprequest function in ext/soap/phphttp.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote attackers to obtain sensitive information from process memory or cause a denial of service type confusion and application crash via crafted...
Fedora 22 : php-5.6.18-1.fc22 (2016-1bc6ca8445)
04 Feb 2016, PHP 5.6.18 Core: Fixed bug php71039 exec functions ignore length but look for NULL termination. Anatol Fixed bug php71089 No check to duplicate zendextension. Remi Fixed bug php71201 round segfault on 64-bit builds. Anatol Added support for new HTTP 451 code. Julien Fixed bug php7127...
Fedora 23 : php-5.6.18-1.fc23 (2016-46a34efa06)
04 Feb 2016, PHP 5.6.18 Core: Fixed bug php71039 exec functions ignore length but look for NULL termination. Anatol Fixed bug php71089 No check to duplicate zendextension. Remi Fixed bug php71201 round segfault on 64-bit builds. Anatol Added support for new HTTP 451 code. Julien Fixed bug php7127...
Fedora 22 : php-5.6.17-1.fc22 (2016-5207e0c1a1)
07 Jan 2016, PHP 5.6.17 Core: Fixed bug php66909 configure fails utf8tomutf7 test. Michael Orlitzky Fixed bug php70958 Invalid opcode while using ::class as trait method paramater default value. Laruence Fixed bug php70957 self::class can not be resolved with reflection for abstract class. Laruen...
Fedora 23 : php-5.6.17-1.fc23 (2016-558167a417)
07 Jan 2016, PHP 5.6.17 Core: Fixed bug php66909 configure fails utf8tomutf7 test. Michael Orlitzky Fixed bug php70958 Invalid opcode while using ::class as trait method paramater default value. Laruence Fixed bug php70957 self::class can not be resolved with reflection for abstract class. Laruen...
VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0008) (remote check)
The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - A directory traversal vulnerability exists that allows a remote attacker to read arbitrary files. CVE-2011-0426 - An information disclosure vulnerability exists due to...
IBM WebSphere Application Server Information Disclosure Vulnerability (swg21676091)
IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
php7 -- multiple vulnerabilities
The PHP Group reports: Core: Fixed bug 71637 Multiple Heap Overflow due to integer overflows in xml/filterurl/addcslashes. SOAP: Fixed bug 71610 Type Confusion Vulnerability - SOAP / makehttpsoaprequest...
DLA-444-1 php5 - security update
Bulletin has no description...
泛微OA某接口无需登录可执行任意SQL语句（附脚本）
简要描述： 荒废了 啥都不会 找工作啊 详细说明： 先以本地为例 http://localhost:8088/ws http://localhost:8088/ws/query?wsdl 竟然提示 Unmarshalling Error: unexpected element uri:"http://.../", local:"arg0". Expected elements are arg1,arg0 搜索 提示是参数问题 改代码肯定是不行的 那就改参数吧 ORA-00900: 无效 sql 语句 看来是可以的 更改第一个参数 select...
Internet Bug Bounty: Type Confusion Vulnerability - SOAP / make_http_soap_request()
https://bugs.php.net/bug.php?id=71610...
Ipswitch WhatsUp Gold < 16.4 Multiple Vulnerabilities
According to its self-reported version number, the version of Ipswitch WhatsUp Gold running on the remote host is prior to 16.4.0. It is, therefore, affected by the following vulnerabilities : - Multiple SQL injection vulnerabilities exist due to improper sanitization of user-supplied input to th...
The vulnerability of the PHP interpreter allows attackers to execute arbitrary code.
The vulnerability of the SoapClient call function in the serializefunctioncall function ext/soap/soap.c in the PHP interpreter is related to improper handling of headers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted packets, which cause ...
CVE-2015-7680
Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx...
Authentication flaw
Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx...
CVE-2015-7680
Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx...